Information Security Analyst

The Information Security Analyst serves as the operational backbone of the security function, responsible for continuous monitoring, rapid incident response, and ongoing maintenance of security tools across on‑premises and cloud environments. This role ensures the confidentiality, integrity, and availability of organizational systems through proactive threat detection, vulnerability management, and security automation.

Essential Tasks

• Monitor security tools including SIEM, endpoint detection platforms, cloud security services, and log management systems for alerts, anomalies, and suspicious activity across all environments
• Review and assess security notifications in real time to identify potential threats

• Perform initial triage and assessment of security incidents following established incident response procedures
• Escalate incidents appropriately and coordinate technical response with cloud, infrastructure, and development teams
• Collect and preserve forensic evidence as part of investigations
• Document incident details, actions taken, root cause analysis, and lessons learned
• Support ongoing improvements to security tooling and operational processes to reduce Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR)
• Assist in automation of repetitive security tasks using PowerShell or Python
• Conduct routine vulnerability scanning across infrastructure and applications
• Validate findings and communicate results to engineering and development teams for remediation
• Track and report remediation progress

Collaboration & On Call Support

• Coordinate cross-team communication during active security events
• Participate in incident response and threat monitoring support, including after-hours
• Communicate clearly and professionally with both technical and non-technical stakeholders

Preferred Skills & Experience

• Bachelor’s degree in technology related field or equivalent relevant work experience
• Minimum 3+ years of experience in systems administration, infrastructure engineering, or development role with strong exposure to system administration and/or network infrastructure
• Strong understanding of operating system platforms (especially Windows) and core network infrastructure concepts
• Working knowledge of security tools and cloud-native security best practices
• Proficiency in PowerShell or Python for security automation, scripting, and process improvement
• Security related certifications such as Security+, PenTest+, CySA+ or equivalent certifications are preferred
• Excellent verbal, written, and interpersonal communication skills

The pay range for this position is $76,000-90,000/year; however, base pay offered may vary depending on job-related knowledge, geographic location, skills, and experience. This position is eligible for commission in addition to a full range of benefits. This information is provided per the relevant state and local pay transparency laws for the location in which this position will be performed.

Benefits

Medical Insurance, Life Insurance, Dental Insurance, Vision Insurance, PTO, Paid Parental Leave, Paid Holidays, Short Term Disability, Long Term Disability, 401K, Educational Assistance 

Jenzabar does not discriminate in employment opportunities or practices on the basis of race, color, sex, gender, gender identity, pregnancy, childbirth and related medical conditions, genetics, genetic markers and carrier status, creed, religion, national origin, ancestry, age, disability, medical condition, marital status, sexual orientation, military service, veteran status, or any other status protected by state and federal laws.

Please Note: Jenzabar does not sponsor applicants for work visas.

Electronic Monitoring Notice:

Job applicants are advised that Jenzabar reserves the right to monitor, access, review, and disclose electronic activity conducted on Company‑owned devices, networks, and systems, as well as activity involving Jenzabar applications or accounts accessed on personal devices. Monitoring may include email, messaging, internet usage, files, applications, and other electronic communications or data, and is performed for security, compliance, and operational purposes.